echojobs.io
Login

Netskope

Information Security Engineer Lead (Red Team)

US
API SQL AWS GCP Python Kubernetes
Search for More Jobs Talk to a recruiter now 💪
Description

About Netskope

Today, there's more data and users outside the enterprise than inside, causing the network perimeter as we know it to dissolve. We realized a new perimeter was needed, one that is built in the cloud and follows and protects data wherever it goes, so we started Netskope to redefine Cloud, Network and Data Security. 

Since 2012, we have built the market-leading cloud security company and an award-winning culture powered by hundreds of employees spread across offices in Santa Clara, St. Louis, Bangalore, London, Melbourne, Taipei, and Tokyo. Our core values are openness, honesty, and transparency, and we purposely developed our open desk layouts and large meeting spaces to support and promote partnerships, collaboration, and teamwork. From catered lunches and office celebrations to employee recognition events (pre and hopefully post-Covid) and social professional groups such as the Awesome Women of Netskope (AWON), we strive to keep work fun, supportive and interactive.  Visit us at Netskope Careers. Please follow us on LinkedIn and Twitter@Netskope.

Job Overview

Netskope Global Information Security organization is looking for a security engineer to be part of redteam and offensive security operations. This position will be responsible for leading the team responsible for assessing the Netskope products and cloud services from a holistic security perspective. A successful candidate should have strong offensive technical skill sets and can identify and provide recommendations for security vulnerabilities pertaining to varying technologies and environments.

Roles & Responsibilities

  • Act as a SME for offensive security technical areas
  • Perform comprehensive security assessment of, but not limited to, web & mobile application, containers, k8s, thick client, cloud environments
  • Perform triage and implement SAST, DAST and SCA process
  • Communicate and collaborate with multiple stakeholders like engineering, SRE, QA for security initiatives 
  • Providing assistance in regulatory compliance like FedRAMP and PBMM
  • Support junior team members in their authoring of reports and issues and help in day-to-day operations 
  • Support and recreate proofs of concept from security reports
  • Support the PSIRT (Product Security Incident Response Team)
  • Automate day-to-day red team tasks

Qualifications/Requirements

  • 6+ years of penetration testing, application security, red team experience in highly diversified and high growth organizations.
  • Understanding of application frameworks and how to approach security as well as security pitfalls with them
  • Proven expertise & track record in web and mobile application penetration testing (Web, Mobile, API/Web Services) - DAST and SAST
  • Experience in leading the team of 3-5 members in security testing domain
  • Should have experience with tools Burp suite professional, Metasploit, Tenable, SQL Map and Nmap
  • Experience in regulatory compliance like FedRAMP and PBMM
  • Have experience in developing exploits and tooling from vulnerabilities both pre and post exploitation and lateral movement
  • In-depth knowledge of OWASP Web and Mobile Top 10 vulnerabilities, identifying, exploiting and remediation of them
  • Good knowledge of TCP/IP and other application and network level protocols
  • Be able to author and issue reports on assigned application and system scan
  • Good exposure to cloud service providers like AWS, GCP and other SaaS applications
  • Experience in automating security tasks using Python or any other scripting language
  • Should be able to think "Out of the box". Possess ability to think and implement new attack approaches/vectors
  • Should possess relevant university degree and/or professional qualifications/certification (e.g. CEH, OSCP, CISSP)
  • Excellent written and verbal communication skills
  • Self-motivated, curious, knowledgeable pertaining to news and current events

#LI-SC1

Netskope is committed to implementing equal employment opportunities for all employees and applicants for employment. Netskope does not discriminate in employment opportunities or practices based on religion, race, color, sex, marital or veteran statues, age, national origin, ancestry, physical or mental disability, medical condition, sexual orientation, gender identity/expression, genetic information, pregnancy (including childbirth, lactation and related medical conditions), or any other characteristic protected by the laws or regulations of any jurisdiction in which we operate.

Netskope respects your privacy and is committed to protecting the personal information you share with us, please refer to Netskope's Privacy Policy for more details.

Netskope
Netskope
Cloud Security Cyber Security Enterprise Software Software

0 applies

4 views

Other Jobs from Netskope

Similar Jobs

There are more than 50,000 engineering jobs:

Subscribe to membership and unlock all jobs

Engineering Jobs

60,000+ jobs from 4,500+ well-funded companies

Updated Daily

New jobs are added every day as companies post them

Refined Search

Use filters like skill, location, etc to narrow results

Become a member

🥳🥳🥳 389 happy customers and counting...

Overall, over 80% of customers chose to renew their subscriptions after the initial sign-up.

To try it out

For active job seekers

For those who are passive looking

Cancel anytime

Frequently Asked Questions

  • We prioritize job seekers as our customers, unlike bigger job sites, by charging a small fee to provide them with curated access to the best companies and up-to-date jobs. This focus allows us to deliver a more personalized and effective job search experience.
  • Salaries for the engineering jobs on our site range from $100K-$200K. On average, senior engineer positions on our EchoJobs are about $160K.
  • The EchoJobs positions have been sourced and vetted from the top companies to work for in the US as a software engineer, including LinkedIn and other reputable job sites. We also have syndicated jobs from companies that have just raised funding, as well as those that have great unique products and culture. From all of these sources, our founder, Morgan, has also resourced the company's authenticity in terms of their website, public appearance, and more.
  • Yes, our users asked us for just this, so now our search filters allow you to search for your top jobs via location, as well as by onsite, remote, or both. Approximately 30% of our jobs are remote, so you’ve got the best options for you!
  • We have not yet implemented this option, but are considering doing so in the future. For the moment, you would need to cancel your subscription, and resubscribe when you wanted to come back.
  • We add new jobs to EchoJobs every day! We scan our sources for the newest jobs, verify them, and post them to EchoJobs within minutes. We add about 2,000-3,000 new jobs for you each day!
  • From starting your job search to getting hired, the entire job search process can take us software engineers anywhere between 3-6 months. However, at EchoJobs, we’re striving to shorten this duration by finding the best, newest jobs for you, so you can do less job searching, and more applying.
  • We’d recommend checking EchoJobs daily, as we add new jobs to the site each day. Additionally, if you got a chance to read our previous email on “what makes EchoJobs different from any other job search tools,” we also recommended that you set a job alert based on your job filters, so if you get emails on those new jobs, you could be checking more than once per day.
  • If you decide to continue with us after the 1-month trial, we definitely recommend this, as we all know it usually takes 3-6 months to find a quality job as a software engineer these days. So to best support you, we just adjusted our membership options at EchoJobs to monthly, 3 months, or 12 months (this option is more for passive job seekers looking a little bit for the future if they want to come back to work or make a job switch potentially. This lets you see what’s out there in case an even better fit job becomes available.)
  • EchoJobs is truly the only job site of its kind. We want to be THE spot for you to find the best job for you, and haven’t encountered any other company doing this. Other job sites are in niches besides software engineering or focus on a small portion of engineering jobs (like a specific coding language). In the words of Morgan, our founder, “I think what makes EchoJobs different is the amount of jobs, frequency that we add new jobs (we add 2,000-3,000 new jobs daily!), and the powerful search engines to find exactly the job you want more easily and efficiently. We can provide you with the most jobs that are vetted by us, we’ll continually find more new jobs for you, and we make it easier for you to apply and get hired.

What Fellow Engineers Say